This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json) Hash identifier: QIS8SED9U0Lwt+vNCYPA+F8EIYjRxCo9ke+O9VNW5QU= Subject key identifier: 13:B1:86:6E:DE:6D:89:DE:63:23:4E:7C:F2:95:CF:BB:FE:A4:1B:A0 Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c Certificate serial: 019B409198CD51AA678263F930EF95E38FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 11:00:42 +0000 Manifest this update: Sun 21 Dec 2025 11:00:42 +0000 Manifest next update: Mon 22 Dec 2025 11:00:42 +0000 Files and hashes: 1: 04shIJz5IjFz6c1cY6KGhxSXODk.roa (hash: eHcSW44cbjs8QXew8FdRC0x6Ql4EYha3SISYT7NbzcI=) 2: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=) 3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=) 4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: Ql9VT4rp6K5SwRpGgpJrOUlLNd4bkm31kproIcgvm2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:98:cd:51:aa:67:82:63:f9:30:ef:95:e3:8f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c Validity Not Before: Dec 21 11:00:42 2025 GMT Not After : Dec 22 11:00:42 2025 GMT Subject: CN=13b1866ede6d89de63234e7cf295cfbbfea41ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:83:39:6e:6f:8a:d3:f7:38:2f:6a:c0:4c: 5e:ce:07:1a:2a:fd:b0:c0:b3:68:9f:cb:0b:20:29: 4c:b4:2e:9b:57:3f:05:4f:c0:cd:59:71:e7:a2:b2: 13:7e:75:8c:ed:c8:57:5a:27:e1:90:26:54:af:f3: 74:6b:c9:db:ef:f4:9f:5e:c3:47:fa:67:40:f6:aa: f8:08:d0:3f:b0:72:65:91:b1:42:18:da:2c:62:3a: 82:64:3b:48:53:cd:90:d5:e3:f0:dc:a6:3e:24:79: dd:97:55:37:94:a8:35:69:69:9f:e9:c6:5e:f7:1b: 55:9a:dd:6b:f5:1c:15:50:a8:e8:7b:52:2b:2a:a6: a1:d4:86:54:82:e4:58:e0:da:18:b5:13:73:3f:02: bc:5d:c5:7c:3e:00:9b:10:dd:6b:3c:c4:55:48:67: 6a:c7:62:c8:da:1c:b4:8d:9b:97:f4:70:68:ef:c3: 23:21:bb:8b:2c:88:f8:17:b5:9f:c1:90:4a:12:dc: 3d:9d:6d:a9:2b:83:8e:f8:44:2a:19:87:3e:17:fc: f2:6b:df:c0:fe:bb:13:9b:ce:7f:f4:bd:ec:c8:73: ee:0a:54:ab:92:3f:94:38:f1:74:8f:0a:47:94:98: c2:ed:9d:46:91:21:57:a5:57:fb:64:9a:2b:2f:9f: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:86:6E:DE:6D:89:DE:63:23:4E:7C:F2:95:CF:BB:FE:A4:1B:A0 X509v3 Authority Key Identifier: keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:eb:68:1b:48:4e:43:1f:99:f7:ed:7b:e6:f3:95:5a:64:0b: 82:33:0e:1b:45:12:36:41:aa:3b:00:1d:db:b6:3d:dc:fe:da: 40:3b:fd:08:ff:85:5c:0b:3d:07:97:26:56:14:d1:00:52:7f: 53:0a:a1:c6:3d:ef:a7:c8:08:e9:f9:84:0f:7f:13:02:c9:5a: 56:2e:c0:1d:cc:fd:f3:ad:40:0a:97:51:51:f9:c7:2a:b8:ea: 97:84:a1:d8:a5:f5:17:ef:89:65:1a:2a:2a:37:e5:ed:3f:10: 88:4d:99:e0:e3:4b:df:17:b8:10:b3:cf:d6:ce:d3:6f:34:d2: b3:20:3a:b6:ed:40:00:f5:a4:5c:96:ad:ce:51:1e:e6:bc:60: 7c:43:82:ac:12:30:b0:95:9a:a1:5a:b3:f3:d4:0e:2a:fb:f5: 76:c6:f1:33:32:fc:66:2a:89:bc:ab:f5:e6:61:90:c5:59:38: eb:80:2e:95:ae:92:61:71:05:90:f4:2e:97:ac:fb:7a:6f:f8: 57:d6:c2:7c:60:a3:c3:18:b3:71:16:17:cd:f8:69:29:c1:d4: 15:60:97:1f:d5:56:d5:60:45:0b:60:3a:ce:46:7c:98:33:07: 15:c7:1f:c3:c2:86:79:fa:25:ae:82:a8:37:24:ef:62:8d:fe: c2:71:87:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkZjNUapngmP5MO+V44/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh ZmYyM2MwHhcNMjUxMjIxMTEwMDQyWhcNMjUxMjIyMTEwMDQyWjAzMTEwLwYDVQQD EygxM2IxODY2ZWRlNmQ4OWRlNjMyMzRlN2NmMjk1Y2ZiYmZlYTQxYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0uDOW5vitP3OC9qwExezgcaKv2w wLNon8sLIClMtC6bVz8FT8DNWXHnorITfnWM7chXWifhkCZUr/N0a8nb7/SfXsNH +mdA9qr4CNA/sHJlkbFCGNosYjqCZDtIU82Q1ePw3KY+JHndl1U3lKg1aWmf6cZe 9xtVmt1r9RwVUKjoe1IrKqah1IZUguRY4NoYtRNzPwK8XcV8PgCbEN1rPMRVSGdq x2LI2hy0jZuX9HBo78MjIbuLLIj4F7WfwZBKEtw9nW2pK4OO+EQqGYc+F/zya9/A /rsTm85/9L3syHPuClSrkj+UOPF0jwpHlJjC7Z1GkSFXpVf7ZJorL5/QVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOxhm7ebYneYyNOfPKVz7v+pBugMB8GA1UdIwQY MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt MTVjYzlkYzdiZDg3LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3 LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZutoG0hO Qx+Z9+175vOVWmQLgjMOG0USNkGqOwAd27Y93P7aQDv9CP+FXAs9B5cmVhTRAFJ/ Uwqhxj3vp8gI6fmED38TAslaVi7AHcz9861ACpdRUfnHKrjql4Sh2KX1F++JZRoq Kjfl7T8QiE2Z4ONL3xe4ELPP1s7TbzTSsyA6tu1AAPWkXJatzlEe5rxgfEOCrBIw sJWaoVqz89QOKvv1dsbxMzL8ZiqJvKv15mGQxVk464Aula6SYXEFkPQul6z7em/4 V9bCfGCjwxizcRYXzfhpKcHUFWCXH9VW1WBFC2A6zkZ8mDMHFccfw8KGefolroKo NyTvYo3+wnGHew== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:07 2025 by rpki-client